Works with Claude on the web, the desktop app and Claude Code. The server speaks MCP over Streamable HTTP with OAuth 2.1 and dynamic client registration, so no keys are pasted anywhere.
Server URL: https://certikit.io/mcp
Claude web and desktop
- Settings → Connectors → Add custom connector.
- Name it (for example "ISO compliance") and paste the server URL. Leave client ID and secret empty: the server registers Claude automatically.
- Click Connect. A browser tab opens the server's sign-in page; sign in to your account and approve access for the workspace shown.
- Back in Claude, enable the connector in the chat's tools menu.
Claude Code
claude mcp add --transport http iso-compliance https://certikit.io/mcp
Then run /mcp inside Claude Code and choose Authenticate for iso-compliance.
First three things to ask
- "Which standards can I use here?" (
list_standards) - "What does ISO 27001 clause 6.1.2 require and which document covers it?" (
get_requirement) - "Start a gap assessment for ISO 27001." (
gap_assessment_start, then answer the questions in conversation)
Tell Claude about the organisation once ("We are a 40-person SaaS company in the UK…") and ask it to save that with update_org_profile; later sessions read it back.
What you will not get
The service explains requirements in practitioner guidance words and cites the toolkit document and version every time. It does not reproduce the text of the ISO standard (keep your licensed copy to hand), and it does not hand out the original toolkit files: get_document returns one template as Markdown for Claude to tailor, with a daily limit per workspace.
If the connection drops
A 401 from the server means the token expired or was revoked: disconnect and reconnect the connector to run the sign-in again. A "suspended" message means the workspace tripped the bulk-download guard; contact support.